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Abstract 

We establish a link between contextuality of quantum mechanics and quantum-mechanical 
computation. Specifically, we show that no deterministic measurement-based quantum compu- 
tation evaluating a non-linear function can be described by a non-contextual hidden-variable 
model. We give examples for such computations derived from quantum codes with suitable 
transversality properties, and from a counterexample to the LU-LC conjecture. 

1 Introduction 

When confronted with the mysteries of the quantum world, one often calls for classical analogues. 
Quantum information is no exception. For example, it has been asked whether quantum computa- 
tion is a quantum analogue to classical digital or to classical analog computation. In this regard, it 
was pointed out that classical analog computation cannot be stabilized against error while quantum 
computation can [HE]- It is therefore hard to perceive the two as mutual analogues. 

Here we explore the remaining possibility, namely that quantum computation is digital. We 
pursue this position not as an end, but rather as a means to inquire about the foundations of 
quantum computation, and to aim at a different approach to quantum algorithms. 

The established concepts of quantum interference, phase estimation [3] and amplitude amplifi- 
cation [4 J provide a framework within which the most powerful known quantum algorithms, such as 
Shor's factoring algorithm [5] and Grover's search algorithm [BJ, are conveniently explained. These 
concepts therefore shape our thinking about quantum algorithms and the origin of the quantum 
speed-up. In the search for novel quantum algorithms and their construction principles, we may 
therefore begin with an alternative concept of the above general kind. Our pick is the digital charac- 
ter of quantum computation, or discreteness. We take the position that both classical and quantum 
computation are built on discrete data structures; and this is the respect in which they are mutual 
analogues. Is such a position justifiable? What can be deduced from this starting point? 

The elementary unit of information in classical computation is the 'bit'. Its quantum counterpart 
is usually taken to be the qubit — the merger of the classical bit with the superposition principle of 
quantum mechanics. But the qubit is not discrete: in any neighborhood, however small, of a valid 
one-qubit quantum state there is another such state. 

To begin, we therefore need to identify discrete structures in Hilbert space that underlie algo- 
rithmic procedures. Such structures exist, and we provide examples for them in this paper. To 
summarize, our program is as follows: (1) Identify discrete structures in finite-dimensional Hilbert 
spaces, and relate them to quantum mechanical computation, (2) Show that quantum mechanics 
is indeed harnessed in these computations, (3) Identify key features required for a speed-up to 
emerge and construct families of algorithms that possess these features. Repeat until an example 
algorithm with a significant quantum speed-up is found. (4) Develop a theory for discrete quantum 
computations. 
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In the present paper, we complete steps 1 and 2 of the above program. We derive examples 
for discrete quantum algorithms from quantum codes with non-Clifford transversal gates. That 
is, we sever quantum codes from their originally intended use of correcting errors, and instead let 
them compute. A further discrete quantum algorithm is derived from a counterexample [Tl] to the 
recently refuted LU-LC conjecture [12], [T3] . 

A suitable setting for our discussion is deterministic quantum computation [10], where the 
computational result is obtained with unit probability. Thus, voluntarily and emphatically we 
restrict to quantum phenomena in which the general probabilistic character of quantum-mechanical 
predictions does not come into play. Thereby, arguably, one of the most prominent features of 
quantum mechanics is left out of the picture. We therefore need to ask: What is quantum mechanical 
about deterministic quantum algorithms? 

We address this question in Section [4] We prove that no deterministic quantum computation 
which computes a non-linear function can, in its measurement-based version, be described by a 
non-contextual hidden-variable model. In other words, every such computation implies a proof of 
the Kochen-Specker theorem^] [8] [9]. Also note that efficient quantum algorithms remain in our 
class. Specifically, a deterministic version of the quantum algorithm solving discrete log exists |10j . 
It is closely related to Shor's factoring algorithm [5 , and breaks the Dime-Hellmann public key 
exchange. 

We point out that the simple deterministic quantum computations discussed as examples in 
this paper do not yet lead to significant quantum speed-ups. We discuss them nonetheless, in 
order to demonstrate first of all that there are discrete structures in Hilbert space that give rise 
to computations. The functions computed in these examples are non-linear. The 'linear vs. non- 
linear' separation is important and natural for the one-way quantum computer [T5j. Also, it is 
the separation between measurement-based quantum computations which can and which cannot be 
described by a non-contextual hidden variable model. 

2 The setting of deterministic quantum computation 

A setting conducive to our study is deterministic quantum computation [TU]. Specifically, we restrict 
to operation on finite-dimensional Hilbert spaces, and require 

Criterion 1. For deterministic quantum computations, 

Input and output are classical bit strings; (la) 

The computation succeeds with certainty. (lb) 



Property (la) excludes quantum algorithms in which the output is presented as the real- valued 
expectation value of an observable. 

We consider deterministic quantum computation in both the circuit and the measurement-based 
model. The former requires less preparation, but in the latter the connection with contextuality of 
quantum mechanics is easier to make. 

2.1 The circuit model 

We consider a quantum register of two sets / and A of qubits, with Bj the computational basis of 
Til, and a unitary circuit C such that 

C(|i)/ ® \0) A ) = \o)j mi)) A , with \o)j G B/V|i>/ G Bj. (2) 

We regard i as the input and o as the output of the computation, and are interested in the function 
o = /(i). 



1 The Hilbert spaces in these proofs have dimension larger than 3, though. 
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2.2 Measurement-based model 

We now translate the circuits Q into their measurement-based versions, for which the connection 
with contextuality of quantum mechanics will be easier to make. Specifically, we consider the one- 
way quantum computer |15] in which quantum computation is driven by local measurements on an 
entangled quantum resource state \^f). 

For all qubits k in the support fl = {1,2, ...,n} of the measured local observables take the 
form 

O k [qk] = cos (p k X k + (-l) qk sin cp k Y k . (3) 

We call the 4> k , k £ £1, the measurement angles. The measurement outcomes corresponding to 
the observables O k [q k ] are denoted as s k = [s] k 6 Z2, with (— l) Sk being the measured eigenvalue. 
The relations between measurement outcomes s and computational output o, and between input i, 
measurement outcomes and basis choice q are all linear [16J. Specifically, 

(4) 



q Ul T \ 1 



Q 


T 





Z 



O \U Z / V s 



Therein, all addition is modulo 2. It may appear that through the matrix representation in Q a 
need to perform multiplication enters into the classical processing. This is not the case. The binary- 
valued matrices Q , T and Z are known in advance and are invariable. Therefore, the individual 
components of o and q can be expressed as sums Oj = oj i = YlieJ Sl m °d 2, qi = qx i = YlieK s i 
mod 2, with fixed sets Ji,K{. Thus, addition mod 2 is sufficient for the classical processing. 

For a (partial) ordering among the measurements to exist we require that if the measurement 
event at k is influenced by the measurement at I, then the event at I cannot be influenced by the event 
at k. That is, [T] kl [T] lk = 0, Vfe, I £ f2. To summarize, a deterministic quantum algorithm is in 
its measurement-based version specified by the quantum resource state \^f), the set of measurement 
angles {<ft k , k £ ^}, and the matrices Q, Z, T. See Fig. [Tjfor an illustration. 

All examples for deterministic quantum computations given in the subsequent sections pertain 
to the special case of flat temporal order, T = 0. Then, the equations Q for q and o decouple, 

q = Qi, (5a) 
o = Zs. (5b) 

In particular, the choice of measurement bases q is a linear function of the input i only. For flat 
temporal order, the quantum mechanical observables which bit-wise correspond to the computa- 
tional output take a very simple form. Denote by the vector corresponding to the r-th row of 
Z, and define the correlation operator 

0.(r)[q]= (g) Oife] (6) 

j\ [zW] J= l 

of the local operators Oj[qj]. Given the promise of deterministic computation, (\I r |O z ( r )[q]|\I r ) = ±1, 
Vr, the relation between the correlation operator O z (,-)[q] and the r-th output bit, o r , is 

(-l)* = (*|0, w [q]|*>. (7) 



With Eqs. ([6| and (JTb, it is easily verified that the linear relation (5b) holds. 



The harder part is to identify a set of measurement angles {4>j,j £ ^2} and a matrix Q, c.f. 



Eq. (5a), such that the promise (^\O z ( r ) [q] |^) = ±1, Vr, is satisfied. In this paper, we are interested 
in quantum computations outside the Clifford group. For the measurement-based version, since the 
|^) will be taken stabilizer states, we require non-Pauli local measurements. That is, Oj[qj] ^ 
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Figure 1: Input and output in measurement-based quantum computation. Each bit of the computa- 
tional output is given by the extremal expectation value of a correlation operator, and is extracted 
as a parity of local measurement outcomes. Through the relation q = Qi, the input i selects the 
correlations to be measured. For each qubit site a, the component q a of the vector q specifies the 
local measurement basis at a. 



Xj,Yj, Zj, for all j £ £1. In this situation, satisfying the promise (^f\O z ( r ) [q] \^) = dbl, Vr, even 
for a single vector q, at least requires a careful adjustment of the measurement angles. Even then, 
satisfying the promise is the exception rather than the rule. But we require more. The number of 
possible evaluations of the function o = g(i) equals the number of admissible vectors q. Thus, for 
fixed measurement angles, we require the set of admissible q to contain two or more elements. On 
top of that, we require this set to be a vector space. Only then is the computed function o = g(i) 



total; c.f. relation (5a). If, against many odds, for a suitable resource \^} all these requirements 



are met, we can finally ask the question: "Is the computed function o = g(i) any interesting?" 



2.3 Why non-linear functions 

In the present context, we are first of all interested in the phenomenology of deterministic quantum 
computations, and would like to come up with examples of small size. We require a suitable criterion 
for what should constitute a sufficiently interesting such example. For the confines of this paper, 
we choose the following 

Criterion 2. A proper deterministic quantum computation evaluates a non-linear Boolean function. 

A Boolean function / is non-linear if it cannot be written as f(x) = Ax + b, with x S Hi!} 1 , 
b S 7*2° and A a binary-valued no X nj matrix. 

One could certainly place the bar much higher than in Criterion[2j — Ultimately, we are interested 
in quantum algorithms that yield a significant speed-up. However, our present much weaker criterion 
seems adequate for the task of gathering initial phenomenology. There is three-fold justification for 
placing a separation line between linear and non-linear functions, 

1. The separation between linear vs. non-linear functions is natural in measurement-based quan- 
tum computation with cluster states [15 . There, the computational capability of the classical 
control device is restricted to addition modulo 2. This limited device can evaluate all linear 
functions by itself; for non-linear functions it requires access to a quantum resource. 
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2. The capability to compute one arbitrary non-linear function, on top of the linear functions, 
implies classical universalityF] 



3. Deterministic measurement-based algorithms which compute a non-linear function cannot 
be described by a non-contextual hidden-variable model, and are thus non-classical. See 
Section I3.2L 

The separation between linear vs. non-linear functions in measurement-based quantum computation 
(containing one-way quantum computation as a special case) has recently been emphasized in [7]. 
Therein, a particularly simple measurement-based realization of the "and"-gate was presented, 
using a GHZ-state as quantum resource. If supplemented by GHZ-states and the capability to 
measure them locally, a classical control computer restricted to additions mod 2 becomes classically 
universal. For this GHZ example, a relationship between computational power and the violation of 
local realistic theories was established. 

In this paper, we will only consider deterministic quantum computations which, in addition to 
obeying Criterion [2] contain non-Clifford operations. The reason is that such computations are not 
amenable to efficient classical simulation by the stabilizer formalism {TTj. 

Equivalence of non-linear functions. In the scenario introduced above, the ability to compute 
non-linear Boolean functions is a resource whereas computing linear functions is for free. We 
therefore call two functions /, g equivalent if there exist linear functions L\, L2, L3, L\, L' 2 , L3 
such that 

9 = L 3 (f, L 2 )Li, and / = L' 3 (g, L' 2 )L[. (8) 
Therein, (m, n) denotes the binary vector obtained by concatenating m and n. 



3 Example 1 

This section introduces, through a simple example, the two main themes of this paper: identify- 
ing discrete structures in Hilbert space for computation, and the relation of these structures to 
foundational aspects of quantum mechanics. 



3.1 Deterministic quantum computation with a 4-particle GHZ-state 



We consider the deterministic measurement-based computation with a four-qubit Greenberger- 
Horne-Zeilinger (GHZ)-state, IGHZ4) = l° 000 Hj im ) ^ ag computational resource. The choice for 
the locally measured observables is between 



L := 0[1] 



X-Y 

~7T 



, and R := O[0] 



X + Y 



(9) 



Furthermore, the linear relations ^ between input i and measurement bases specified by q, and 
between measurement results s and computational output o are 



Q2 



/ 1 \ 

1 

1 

V 1 1 1 / 




(<*) 



1111 



S3 
V *4 J 



(10) 



2 Computability of any non-linear function on top of linear functions implies the "and" -gate: Wlog consider a 
nonlinear function / : Z£ — ► Z 2 . Then, there exist vectors a, b, c G Z£ such that /(c)©/(c©a)©/(c©b)©/(c©a© 
b) = 1. For this triple of vectors a, b, c, and for r, s G {0, 1}, define g(r, s) := /(c©ra©sb)©/(c©ra)©/(cffisb)ffi/(c). 
The function g can be computed by querrying / and addition mod 2. Also, it is easily verified that g(r, s) = rs — rAs. 
Addition mod 2 plus the ability to perform "and" -gates yields universal computation. 
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As we now demonstrate, this procedure allows to compute a non-linear function equivalent to the 
Toffoli gate. It is easily verified that IGHZ4) is an eigenstate with eigenvalue 1 of the following 
tensor product operators: 

— L1L2L3L4, L1L2-R3-R4, L1R2L3R4, L1R2R3L4, 

R1L2L3R4, R1L2R3L4, R1R2L3L4, — i?ii?2^?3-R4- 

Note that two of these operators, namely those with all L or all R, carry a minus sign. 

Now, if (11,12,13) = (1,1,1) then (qi, q 2 , ffi, (7 4) = (1,1,1,1), and the local measured observables 



are L u L 2 , L 3 , L 4 . Then, with Eqs. (|9j), (jllf, o x = Yj i=x H mod 2 = 1. If (ii,i 2 ,i 3 ) = (0,0,0) 
then (<Zi, (72, <?3, 94) = (0,0,0,0), and the local measured observables are R\, R2, R3, Ra- Then, 
o\ = YU=i Si m °d 2 = 1. In the six other cases, o\ = YU=i Si m °d 2 = 0. Thus, the computed 
function is 

oi = /(i) = 5(ii,i 2 )5(i 2 ,i3). (12) 

With the equivalence relation Q, i.e., modulo linear functions, the function / = o\ computed 
by measurement-based computation on the resource IGHZ4) is equivalent to a Toffoli gate g : 
(t,ci,c 2 ) — ► Toff(t,ci,c 2 ,t) = (iffi cic 2 ,ci,c 2 ). In Q, let L\{x) = A\x + b\, L 2 (y) = A 2 y + b 2 , 
Lz{z) = A3Z, and 

/ 1 1 Q \ / 1 \ / 1 1 

-li = I ) Mi = i 1 I ,A 2 = 1 1 ,63= 1 \ ,A 3 = 1 

\1 0/ \0 J \0010 

Similar expressions hold for L^, L' 2 , L' 3 . 




3.2 Computation and contextuality 

Certainly, it does not require a quantum system to efficiently implement a classical Toffoli gate. 
Therefore, for our quantum-mechanical way of implementing it, we need to ask: Do we really harness 
quantum mechanics in this computation? The answer is 'Yes'. Our procedure is quantum, or at 
least non-classical, because it cannot be described by a non-contextual hidden-variable model. 

Hidden-variable models (HVMs) were spurred by Einstein, Podolsky and Rosen's observation 
|31j that, given a set of assumptions about what should constitute 'physical reality', quantum 
mechanics could not be considered a complete description of the physical world. Contrary to a 
quantum-mechanical description of a physical system, according to which the outcome of a mea- 
surement is brought into existence by the act of measurement, in a hidden- variable model the 
outcome is merely revealed by the measurement and was a property of the measured system all 
the time before. Specifically, for each member in an ensemble of identically prepared states, values 
va, vb, vq, •• are assigned as pre-existing measurement outcomes to observables A, B, C, .. . 
The sets of values may differ from copy to copy in the ensemble, and are distributed in such a way 
as to reproduce the quantum-mechanical predictions for the measurement of a set of commuting 
observables. 

With no additional assumptions made, hidden-variable models cannot be ruled out as descrip- 
tions of physical reality; See [32 for an example. This changes, however, with the seemingly most 
innocent additional assumptions. One such assumption is non- contextuality. It asserts that, for 
commuting observables, the values v only depend upon the observable they are assigned to, but not 
on the observables measured in conjunction; i.e, va = v(A), vb = v(B), etc. With this additional 
assumption, HVMs are ruled out by the Bell-Kochen-Specker theorem (HJ [9]. 

Versions of the Bell-Kochen-Specker (BKS) theorem have been derived for different settings, 
and the original proofs have been simplified [33] - [37] • In the context of quantum information, the 
BKS theorem has been related to quantum codes [38] EH], quantum cryptography [30], two-party 
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secure computation [41] and to quantum games \42\ I43j . Also, the BKS theorem has recently been 
tested experimentally |44j . 

Of particular interest to us are Mermin's proofs [34j of the BKS theorem, one applying to a 
Hilbert space of dimension d > 4 and one to d > 8. The latter of the two admits the foundation of 
non-contextuality in locality. Also, the argument becomes state-dependent, with the state in ques- 
tion being a three-party Greenberger-Horne-Zeilinger state (GHZ-state) [29]. This state-dependence 
may appear as a drawback from some perspective, but for us it provides a link to computation: as 
has been shown by Anders and Browne (7j, accessing GHZ-states by local measurement renders a 
very limited classical control computer classically universal. 

Since the present computational resource is a four-particle GHZ-state, our discussion of con- 
textuality will closely parallel Mermin's argument [M] for a three-particle GHZ-state. We start 
from the assumption that a non-contextual hidden variable model describing measurement-based 
computation on IGHZ4) exists, and derive a contradiction. We consider the nonlocal observables 



from the first row of Eq. (11) and the local observables Lj, for i = 1..4, whose measurement 



drives the computation. An HVM must assign values 

v(LiL 2 L 3 Li), v(L 1 L 2 R 3 R4), v(L 1 R 2 L 3 R i ),v(L 1 R 2 R 3 L4), 

v(Lt), v(L 2 ), v(L 3 ), v(U), (13) 
v{R 2 ), v(R 3 ), v(Ra), 

to the respective observables such that its predictions are compatible with quantum mechan- 



ics. From Eq. (11) then follows that v{L\L 2 L 3 L^) = —1, v{L\L 2 R 3 R/±) = v{LiR 2 L 3 R^) = 
v{L\R 2 R 3 L4) = 1. Also, in order to agree with quantum-mechanics, for a set of mutually commut- 
ing operators the corresponding values v must obey the same identities as the operators do. Thus, 
(L1L2L3L4) L\L 2 L 3 L± = / implies v (L\L 2 L 3 Ln) v (Li)v(L 2 )v(L 3 )v(L4) = 1, etc, such that 

v{Li)v{L 2 )v{L 3 )v{L&) = -1, 

v{Li)v{L 2 )v{R 3 )v(R4) = 1, 

^LxMi^MLgM^) =1, { ' 

v(L 1 )v(R 2 )v(R 3 )v(L i ) = 1. 



No assignment to local values v(-) = ±1 can satisfy the set of constraints (14). The product n of 



all v as they appear in (14) can be evaluated in two ways, namely (a) by first multiplying within 



the rows and (b) by first multiplying within the columns. In (a) one obtains n = —1, as is evident 



from the right column in (14). Regarding (b), note that every v{-) appears an even number of times 
in the table, hence n = 1. Contradiction. Thus, the statistics from measurement of observables ^ 
on a four-particle GHZ-state does not permit a non-contextual HVM description. 



4 Measurement-based quantum computation is contextual 

The connection between deterministic quantum computation and contextuality of quantum me- 
chanics is not limited to a few examples such as the one discussed in the previous section. Rather, 
it generalizes to a large class of deterministic measurement-based quantum computations. In this 
regard, note the following 

Theorem 1. Consider measurement-based quantum computation by local projective measurements 
on a multi-qubit quantum state, with at most two choices for the measurement basis at each qubit 
location. If such a computation deterministically computes a non-linear Boolean function then it 
cannot be described by a non-contextual hidden-variable model. 

In other words, every proper deterministic quantum computation by measurement implies a 
proof of the Bell-Kochen-Specker Theorem, albeit in higher dimensions than three. 
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Proof. We assume a non-contextual HVM for measurements on the computational resource \^f) 
assigning pre-existing values v{Oi[qi\) = (— l) Si ^ to the local observables Oj[%], q% 6 {0,1}, Vi, 
and pre-existing values v(Oj[q]) = (— l)° J [ q ] to the non-local observables Oj[q], for all allowed 
supports J. Recall that, for each J, (Oi[%]) yields one bit of output, and q comprises the input to 
the computation. Let K be the index set for an ensemble of identically prepared quantum states 
Y&k) = |^)) for all k = l..\K\. Within the HVM, the assigned values Sj may depend on k 6 K; and 

(fc) (fc) _ ,(fe) h K s 

s • = c\ ' @ d\ 'qi. (15) 

There is no loss of generality in assuming a linear relation between Si and qi, since there are only 

(k) (k) 

two data points to match, qi = and qi = 1. The parameters and contain exactly the same 
information as [qi = 0] and 8$ [qi = 1] . 

In an HVM description, the expectation for the observable Oj is (Oj[q]) = r^r X^'iC - 1)°' J ^ q '- 
Since Oj[q] and the local Oj[aj] are mutually commuting, in order for the HVM to agree with 
quantum mechanics, we must require that Oj [q] = YljeJ s j fa?'] m °d 2, for all k = l..\K\, and 



therefore 



(Oj[q\) = (*|Oj[q]|*> = ^E(- 1 ) EjejSf)fel - ( 16 ) 



LfiT 

1 1 fc=i 



Since the computation is deterministic, (Oj[q]) = ±1. There are \K\ terms in the sum over k on the 



rhs of (16), each having a weight of 1/|-K"|. Therefore, the expectation value can only be extremal 



if each term in the fc-sum has the same sign, i.e., YljeJ s j fall = Y^jeJ s jl<lj] ^ or an ^ = 



Thus, with (15) 



For all valid input vectors q, the output oj[q] of the computation is linear in q. Thus, a description of 
a deterministic MQC by a non-contextual HVM implies that only linear functions can be computed. 
Negation of this statement yields Theorem [T] 



5 Computing with codes and LU-LC counterexamples 

Next, beyond the initial example given in Section [3j we identify a range of examples for discrete 
structures in Hilbert space that give rise to computation. So, where shall we look? As noted in the 
introduction, elements of discreteness are revealed in the techniques of quantum coding and error- 
correction. Among them are error-discretization by measurement [TH] , discrete sets of transversal 
encoded gates, and the Solovay-Kitaev construction [19], [20] for approximating arbitrary gates 
by sequences of gates from a fixed set. We pick the discreteness of the transversal gate set as 
our starting point. For any quantum code a certain group of encoded gates can be implemented 
transversally. This group varies from code to code, but it is always finite. For a given quantum 
code, within a sufficiently small neighborhood of a transversal gate there is no other. 

A second place to look for discrete structures in quantum computation are counterexamples to 
the recently refuted [TT] LU-LC conjecture. The LU-LC conjecture says that whenever two stabilizer 
states are local unitary equivalent they are also local Clifford equivalent. Were the LU-LC conjecture 
true, it would imply a computationally efficient test for local unitary equivalence among stabilizer 
states, because local Clifford equivalence can be efficiently tested |14j . Such a test is desirable 
for a number of reasons: Local unitary equivalent stabilizer states contain the same amount and 
kind of entanglement and — as resources for measurement based quantum computation — have the 
same computational power. Furthermore, local unitary equivalent stabilizer codes offer the same 
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Figure 2: Discreteness in quantum error-correction and its algorithmic use. a) Transversal gates on 



encoded qubits. b) Graphical representation of the circuit (19). 



protection against local error. But, as has recently been demonstrated by a counterexample 
the LU-LC conjecture is false. Due to the above motivations for the conjecture, its breakdown is 
easily seen through a negative lens. But there is a positive angle to it as well: Hilbert space is more 
intricate and more intriguing than sometimes expected! 

The unifying element among the above quantum codes and LU-LC counterexamples is the in- 
terconversion between stabilizer states by non-Clifford local unitaries. The existence of such trans- 
formations is a remarkable property of Hilbert space. Here, we relate this property to computation. 

5.1 From quantum error-correction to quantum algorithms 

Consider a family of quantum state {\i/j a ) '■= ($7=1 ex P(* a ^'i)IV'o)> a £ where \ipo) is in the code 
space TCcodc of an n-qubit stabilizer code. For all except a finite set of angles aj~ = ka%, k G Z, the 
state \ip a ) is not in the code space. As a is increased from 0, the trajectory of \ip a ) departs from the 
code space but then intersects the code space again at a finite angle a\. \ipai) is related to |-0o) by 
an encoded unitary transformation U. E.g. for the Steane code, at = vr/4 and U = exp(— iir/AZ) 
is a transversal gate. A 15-qubit CSS code based on the punctured Reed-Muller code 72.* (1,4) has a 
non-Clifford transversal gate [26J. For this reason, we will discuss the Reed-Muller codes in greater 
detail below. 

Our task now is to make the transition from error-correction to algorithmic procedures. To this 
end, we sever quantum codes from their native context of error-correction and devise a method 
to employ them as computational resources. We consider an [n, 1, ci]-stabilizer code with stabilizer 
generators {gi, i = 1, .., n — 1}, for which an encoded gate U = exp (i(3Z) is transversal, i.e. 3 V = 
exp (iaZ) such that, on the code space, 

n 

U = (g)Vi. (18) 
i=i 

We invoke this code into a quantum circuit consisting of the following steps: 



1. Preparation of a state |^i n (p)) with stabilizer generated by 
{(-l)^,i = l,..,n-l}U{(-l)^Z}, 

2. Applying the transversal unitary ®" =1 Vi, followed by U , (19) 

3. Measurement of the observables gi and X, yielding outcomes 
(-1)°*, i = l..n. 
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A graphic representation of this circuit is shown in Fig[2j). The circuit (19) is a special instance of 
the general setting Q, with the ancilla set A = 0, if one adds encoding and decoding circuits to 
transform between the computational and the stabilizer basis. 

How does the circuit compute? The binary string p = (pi, ..,p n ) encodes the input to the 
computation, and o = (oi,..,o n ) is its output. First, consider the special case of pi = for all 
1 < % < n — 1. That is, |^ , ; n (p)) is in the code space and only the eigenvalue (— l) Pn of X is alowed 
to vary. Then, the unitaries in step 2 of the protocol (19) mutually cancel, and the computed 
function is the identity Id : %2 — > 7L 2 - Next, consider more general inputs p for which |*I>i n (p)) 



is perpendicular to the code space. Then, the tranversality identity (18) no longer applies. The 



expectation values of the observables measured in step 3 of ( 19 ) will in general not be extremal, 



violating the determinism condition (la). Thus, we restrict the binary vectors p to a set V, such 
that (la) remains satisfied for all p £ V . For those p, we are interested in the function o = /(p) 



computed by the circuit (19). We seek quantum codes for which the function / is non-linear. 

We have, from the present perspective, no guarantee that such quantum codes exist. Further- 
more, if they do, we do not know whether there is additional structure to the corresponding sets 
V of admissible input vectors. It is desirable for V to be a vector space, such that the computed 
function / is total. To get a first glimpse at the situation, we try a few examples. 

5.2 Example 2: the punctured Reed-Muller code 7£*(1,5). 



We now specialize the circuit (19) to an instance where a non-linear function is indeed computed. 



Left unspecified in the circuit (19) is the code upon which the incoming quantum state |\I/i n (p)) 
is based. Of our interest are circuits with non-Clifford gates, and we thus require quantum codes 
for which such gates are transversal. One such family are CSS codes [2JJ [22J based on punctured 
Reed-Muller codes lZ*(l,m) [23], [23]. The resulting quantum codes Hq(1, m) require 2 m — 1 qubits 
and have a transversal non-Clifford gate U = exp (iir/8 Z), if m > 4 [26 . 

We begin with a definition for Reed-Muller codes |23| [23] : also see |25j . Consider a Boolean 
function h(v\, .., v m ) = h(v), and denote by h the 2 m -component vector obtained from all the 
evaluations of h, [h] v = h{v). Then, 

Definition 1. The r-th order binary Reed-Muller code 1Z(r,m) of length n = 2 m , for < r < m, 
is the set of all vectors h, where h(vi, .., v m ) is a Boolean function which is a polynomial of degree 
at most r. For < r < m — 1, the punctured Reed-Muller code lZ*(r,m) is obtained by puncturing 
(or deleting) the coordinate corresponding to v± = V2 = ■■ = v m = from all codewords of lZ(r,m). 

Each code TZ*(r,m) has a specific basis B*{r,m) = {b^, .., b^}, where the basis vectors 
for 1 < i < dim(7t!*(r, m)), are obtained, respectively, from the polynomials l,vi,V2, 
viv 2 , ..,v m -iv m , viv 2 v 3 , .. ,v m - r+1 v m - r+ 2 ■ - Vm of degree l..r. In particular, b (1) = (1,1, ..,1). 
Denote by [B*(r, m)\ the binary matrix with the elements of B*(r,m) as its rows. Further, let the 
binary matrices Gx, Gz specify the stabilizer generator matrix for a CSS code in standard form, 
and X and Z be the characteristic vectors of the support of the encoded Pauli operators X and Z. 
Then, the CSS code TZ*q{r,m) based on the punctured Reed-Muller code 1Z*(r,m) is defined by 



V 



X 


) 






G x 




_ / [B*(r,m)] 






Z 




[B*{m — r — 1, m)] 



G z j 



(20) 



entering the circuit are CSS states, and p G V, the computed function takes the form 



Before we study the circuits ( 19 ) numerically, we note that whenever the quantum states |^i n (p)) 

(21) 



ox 
oz 



Px © f(Pz) 
Pz 
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Therein, p = (PxiPz) an d ° = {.°x,°z)- Thus, since we are after non-linear functions, we may 
focus on ox, and furthermore set = 0. 



We now perform a numerical study of the circuit (19), with the initial states |^i n (p)) related to 
the CSS code 7£g(l,m) as follows: |^i n (0)) = |+) is in the code space of 7£g(l,m), and the states 
l^in(p))) for all p / 0, have the same stabilizer as |^i n (0)) except that some stabilizer eigenvalues, 
as specified by p, are flipped. 

The resulting circuit is, for moderate values of m, amenable to classical simulation using weight 
enumerators. The smallest value of m which permits a non-Clifford transversal gate is m = 4. For 
this case, however, the computed function turns out to be f{Pz) = 0, which is not useful. 

Next, we try m = 5 which results in a quantum code on 31-qubits. This time, the computed 
function f{pz) is non-constant. Also, it turns out that the set V of admissible p z is a vector space. 
We may thus write p z = Pi, where the columns of P form a basis of V . The computed function is 
thus total. Furthermore, in each component corresponding to the measurement of an X-stabilizer 
generator, the output value is found more often than the output value 1. The relative frequencies 
for finding these outcomes have a ratio of 9:7. Since any linear function is constant or balanced, 
the function ox(i) = /(-Pi) computed here must be non-linear. We have thus found an example for 
a proper deterministic quantum computation. 

5.3 Example 3: Measurement-based computation with Reed-Muller codes 

It is now natural to ask "Are the examples for deterministic computation from the previous sections 
isolated ones, or are they members of large families?" . In this section we show that the two examples 
discussed previously each belong to a large family, and, in fact, the same family. We provide 
a criterion for when measurement-based computation with Reed-Muller codes deterministically 
evaluates a nonlinear function, and give a closed-form expression for what these functions are. 

The previous example 1 was within the framework of measurement-based computation, and 
example 2 within the circuit model. To facilitate their grouping together, we translate the latter 
into the measurement-based model. Under this translation, the "Reed-Muller-ness" is moved into 
the computational resource \^f). We make the following 

Definition 2. A Reed-Muller quantum state \lZ(r,m)) is 

\K(r,m)) = ^ Yl l h >' ( 22 ) 

with d the dimension of H(r,m). 



If a circuit (19) is based on a CSS-code 7£g(r, m), then the corresponding measurement-based 
computation uses a resource state \TZ(r, m)). We do not provide a detailed proof of this statement 
The key observation is that \1Z(r,m)) is a Bell state among a bare qubit and a qubit encoded with 
lZ*Q{r,m). The remainder of the argument consists of re-ordering operations. 

The \lZ{r,m)) are stabilizer states, and are highly symmetric under permutations of their re- 
spective qubits. This symmetry is revealed when placing the qubits of \TZ(r, m)) on the sites of an 
m-dimensional hypercube; See Table [T] for a graphic representation. 

To completely characterize a measurement-based based quantum computation, we need more 
than the resource state. We also need to specify the measurement angles {4>k, k £ 0,} for the locally 
measured observables, as well as the linear relations between computational input and choice of 



3 A simple consistency check is as follows. The computational resource |$) of the measurement-based version must 
have as many qubits as the circuit |l9| has non-Clifford gates. Now, the circuit based on Hq(t, m) has 2 m — 1 qubits 



and 2 m non-Clifford gates. Thus, in the measurement-based version, the resource state \1Z(r,m)) must have 2 n qubits, 
which is confirmed by Definition [2] 
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Table 1: Small computational resources \lZ(r,m)), for parameters < to < 4, < r < 2. The 
Reed-Muller codes 1Z(r,m) are associated with Euclidean geometries EG(m,2), i.e., m-dimensional 
hypercubes. The qubits of \TZ(m,r)) are located on the vertices of the hypercube, and the X and 
Z-stabilizer generators have support on the m — r and r + 1-dimensional sub-cubes, respectively. 
The support for Z-stabilizer generators (edge, face or volume) is indicated in red. 



measurement bases, and between local measurement outcomes and result of the computation. For 
this purpose, we make the following 

Definition 3. Q(r, t, m, x) is a measurement-based quantum computation on a state \TZ(r,m)), 
specified by the measurement angle <pj = <j> for all j € O, 

^=^,XGN, (23) 

and 

Q T = [B(K(t,m))}, 
Z = [B(K(r,m))], (24) 
T = 0. 

Recall that the matrices Q, Z and T govern the linear relations Q between input i and choice 
q of measurement bases, and between measurement outcomes s and computational output o. As 
before, [B(Jl(t,m))] denotes the matrix with the elements of the basis B(JZ(t,m)) as its rows. The 
angles <j>j = <f> specify the local measured observables ^ . The choice ( 23 ) reflects the transversality 
property (|18j) of CSS codes based on Reed-Muller codes TZ*(r, m). 



With definition [3j Q(l, 2, 5, 2) is the measurement-based equivalent to Example 2 of Section 5.2 
Also, it is easily verified that Q(0, 1, 2, 2) is Example 1 of Section |3j 

The question now is for which sets of parameters r, t, m, x the measurement-based quantum 
computation Q(r, t, m, x) is deterministic and computes a non-linear function. This question is 
answered by 

Theorem 2. Q(r,t,m,x)> with parameters m,r, t > 0, x — 1 ^ s deterministic only if m > 2r 
and deterministically computes a non-linear function only if m > 3r. Q(r,t,m,x) deterministically 



12 



m 

5 10 15 20 25 30 35 40 



r 




Figure 3: Phase diagram for deterministic quantum computations Q(r, t, m, x) with Reed-Muller 
states \lZ(r,m)). Non-linear functions are deterministically computed in the parameter region m > 
3r + 1. The computation is probabilistic for r < m < 2r, and deterministic linear for 2r < m < 3r 
or (r, m) = (0, 1). For the transversality line, m = 3r + 1, r > 1, it is not known whether non- 
linear functions can be computed deterministically. In the deterministic non-linear regime, regions 
with different maximum value of the parameter x are separated by contour lines, x specifies the 
measured local observables. Non-Pauli measurements, i.e. Oj ^ Xj,Yj, Zj, correspond to x > 2. 



computes a non-linear function if x > 2 and 

(X — 1) (r + t) < m - r < xt- (25) 
This condition can be satisfied if m > 3r + 1. 

The next question is after the functions that are being computed. It is answered by 



Theorem 3. For Q(r,t,m,x)> under the condition (25), all inputs q = Qi mod 2 G 1Z(t,m) 
satisfy the promise Zq mod 2 X ~ 1 = 0, and Z (1, 1, .., mod 2 X = 0. The function computed by 
Q(r, t, m, X ) is o[i] = Z{Qi m ° 2 d x 2 \ mod 2 * + o , with o = [Z (1, 1, .., if mod 2* +1 ) /2* 

Note that each component of o[q] can only equal or 1. We obtain one bit of information 
per component of output, compatible with the information that can be gained in the measurement 
of an observable whose expectation value is promised to be extremal. The non-linearity in the 
function o[i] arises through the mismatch of the involved additions mod 2 and mod 2 X . The proofs 
of Theorems [2] and [3] are given in Appendix |A} 

The constraint (125]) gives rise to the phase diagram for the deterministic computations with 



computational resources \TZ(r, m)), displayed in Fig. |3j With (25 ), if m > 3r + 1 then deterministic 
computation of non- linear functions is possible with a resource state \lZ(r,m)). To the left of the 
transversality line [26], i.e, m < 3r + 1 deterministic computation requires x = 1 which can only 
yield linear functions. The only region in the r/m-plane where we cannot conclude whether or or 
not deterministic computation of a non-linear function is possible with a resource \H(r,m)) is the 
transversality line m = 3r + 1, r > 1. 

To summarize, we have described and characterized a family of deterministic measurement- 
based quantum computations based on Reed-Muller states {\1Z(r, m))\r, m G N, r < m}. Theorem [2] 
provides a sufficient criterion for when these computations are non-linear, and Theorem [3] a closed- 
form expression for the computed function. It turns out that, for the discussed family of resource 
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states, the computed functions are rather simple. To their defense, let us point out that in a 
scenario of distributed computation a similar protocol for integer addition, using GHZ-states and 
local measurements, leads to exponential savings in the communication cost |30j. 



5.4 Example 4: Letting LU-LC counterexamples compute 

We will provide one more individual example for deterministic computation of a non-linear Boolean 
function, in the measurement-based setting. It is derived from a counterexample to the LU-LC 
conjecture. The counterexample is obtained using the software supplementing [11]. We consider 
the two stabilizer states 

|*i)=X>>> |$ 2 > = ]T(-1) Q ^|*>. (26) 

xes xeS 

|3>i), | $2) are quantum states on 35 qubits. S is a vector space spanned by the six binary vectors 

e = (1,0,1,0,1,0,1,0,1,0,1,0,1,0,1,1,1,0,0,0,1,1,0,1,1,1,1,0,1,0,1,0,1,0,1) 

e = (0,1,1,0,0,1,1,0,0,1,1,0,1,0,1,1,0,1,0,0,1,0,1,1,0,1,0,0,0,1,1,1,1,1,1) 

£ 3 = (0,0,0,1,1,1,1,0,0,1,1,0,0,1,1,0,0,1,1,0,0,1,1,0,0,1,1,1,1,1,1,0,0,1,1) 

e = (0,0,0,0,0,0,0,1,1,1,1,0,0,0,0,1,1,1,1,0,0,0,0,1,1,1,1,0,0,0,0,1,1,1,1) 

e = (0,0,0,0,0,0,0,0,0,0,0,1,1,1,1,1,1,1,1,0,0,0,0,0,0,0,0,1,1,1,1,1,1,1,1) 

£ 6 = (0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1) 



(27) 



and, for x G S, \x) is the computational basis state specified by x. Q is a quadratic form given by 

Q(x) = X\Xyj + X 2 X 32 + X\X 22 + X 2 Xg + X\X 2 5 + X 2 X W + X\X 2 7 + X 2 X 2 \ + 2l223 + 
X\X\Q + Xi^ig + X2X23 + £3X25 + Z1X13 + X 2 Xu + XiX 2 6 + X\X 2 \ + X\X 2 q + 
X1X24 + X 2 X 22 + X\Xl 2 + X2X13 + X 2 X 20 + X 2 X 3 3 + X2X34 + X3X10 + X3X11+ (28) 
X 3 Xi 7 + X3X19 + X3X24 + X4X1Q + 2 4 X 2 i + X4X28 + X4X31 + X5X14 + 25X30 + 



X6X29 

We define the local unitary 
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U(e) = (g)exp(i-e j Z j ). (29) 



Then, for 

e = (3,3,7,1,1,1,3,3,3,3,3,5,7,3,1,7,7,5,5,3,5,5,7,7,5,3,5,7,3,3,3,5,5,5,1), (30) 

|$2) = U(e)\$>i). U(e) is a non-Clifford local unitary. In contrast, there are no Clifford local 
unitaries that relate the two states. The pair of states |3>i), \& 2 ) thus represents a counterexample 
to the LU-LC conjecture. Furthermore, it is easily verified that 

|$ 2 ) = f/(e + ak (1) + 6k (2) mod 8) (31) 

for all a, b G Z2, where 

k« = (4,4,0,4,0,2,0,4,2,0,2,0,2,2,0,2,0,0,2,0,0,0,0,0,0,0,0,2,2,0,0,2,2,0,0), 

k (2) = (4,0,0,0,2,2,2,0,0,0,2,4,0,0,2,0,0,0,2,4,0,0,2,0,0,0,2,2,0,2,2,0,0,2,0). 1 ' 

The local non-Clifford unitary relating |<J?i), \& 2 ) is thus not unique. This fact is central for the 
conversion of the above LU-LC counterexample into an example for measurement-based quantum 



computation of non- linear functions. In accordance with Eq. (31), we subsequently restrict to 
k = ak (1) + 6k (2) mod 8. 

The following procedure computes the AND-gate, a AND b = ab: 
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1. Classical pre-processing: From the input a, b and the known vectors k^ 2 ^/2 compute 
q = ak (1) /2 + 6k (2) /2 mod 2. 

2. Put in place the stabilizer state state |<J>2) as computational resource. 

3. Measure the local observables 

Oj( qj ) = cos (7re 3 -/4) X j + (-1)* sin ( TOj /4) Y jt (33) 



with ej := [e],- as specified in Eq. (30). Obtain the measurement outcomes Sj G Z 2 . 



4. Classical post-processing: Compute the parities o\ = Z)j|[^]-=i s j' f° r ^ = l--6> and ^ as given 



in Eq. (27). The output of the computation is o = (01, ..,oq) 



For fixed and known vectors k^^/2, k*- 2 ^/2, the classical processing in steps 1 and 4 can be done 
with addition mod 2 alone. Regarding step 1, each component of q is linear in a and b, with fixed 
known coefficients. 

The first output bit of the above protocol is o\(a, b) = a AND b. Let us briefly explain why this 
holds. First note that, for all ej S {1, 3, 5, 7} and kj E {0, 2, 4, 6}, 

ej + kj mod 8 = (— l) 9j ej + 4v(ej, kj) mod 8, where 

qj = kj/2 mod 2, and (34) 
v(ej,kj) = kj(ej + kj/2)/4 mod 2. 

Thus, up to a global phase, U(e + k) = V{k,e)W{k), where V(k,e) := ®f =1 {Zj) v(e >' kj) , and 
W(k):=®f =1 exp(q(-lp/ 2 Zj). 

By (|26|), the operators X(l) := =1 Xj are in the stabilizer of |$i). Then, with the relations 



(34) in hand, we find 



1 = = ($ 2 |C/(e + k)X(Z)C/(-e-k)|$ 2 ) 

= ($ 2 \V(e,k)W(k)X(l)W(-k)V(-e,-k)\$ 2 ) 

= (-l)*<*a| (g) P*(«#)l*2>, 



where 



r//(e, k) = v(ej,kj) mod 2. (35) 

3lK']j=l 

The above protocol extracts the expectation values ($ 2 | <^)jir^(|. =1 Oj(qj, 0j)|<l? 2 ) ='■ (— for Z = 
1..6 (after the classical post-processing of the local measurement outcomes), and thus o; = ?#(e,k). 



Recall that we have specialized to k = ak^ + bk^ 2 \ Then, with Eqs. (27) and (35 ), we obtain the 
logical table of an AND-gate for oi(a,6) = r/i(e, ak^ + &k( 2 )); i.e. 01 (0,0) = oi(l,0) = oi(0,l) = 0, 
oi(l, 1) = 1. The AND-gate is a non-linear Boolean function. 

6 Conclusion and outlook 

In this paper, we have explored elements of discreteness in quantum computation. To start out, we 
posed two questions: 1) "Can discrete structures in Hilbert space be linked to algorithmic tasks?", 
and 2) "If so, what is quantum about the resulting computations?". We have identified discrete 
Hilbert space structures in quantum codes and a LU-LC counterexample, and turned them into 
simple computations. Thus we answered the first question to the affirmative. Regarding the second 
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question, for measurement-based quantum computations obeying the discreteness conditions ([I]), 
we have identified contextuality as an element of non-classicality. 

Continuing to explore the link between quantum-mechanical computation and contextuality of 
quantum mecanics, two further questions now become pertinent. First, above we proved that when- 
ever a measurement-based quantum computation deterministically evaluates a non-linear Boolean 
function it implies a proof of the Kochen-Specker theorem. It is natural to inquire about the reverse 
direction. Do the known proofs of the Kochen-Specker theorem lend themselves to measurement- 
based computations? Which functions are being computed? Is there additional structure to the set 
of admissible inputs? Second, Is the property of contextuality in the discussed computations model- 
independent? In particular, the measurement-based examples discussed in Sections 5.3 and 5.4 have 
all counterparts in the circuit model. Thus, it is worth testing whether these circuit counterparts 
also exhibit contextuality. The tools for such an analysis are provided in |45J, where the notion of 
contextuality has been extended to state preparation and evolution. 

The long-term goal of the present work is to discover novel efficient quantum algorithms, through 
the classification of discrete structures in Hilbert space. At present, such a classification does 
not appear within range, and intermediate steps need to be identified. Two such steps are (a) 
The classification of deterministic quantum algorithms with flat temporal order, and (b) Finding 
and analyzing examples for deterministic quantum algorithms with non-flat temporal order. It is 
expected that non-flat temporal order is a key ingredient for deterministic computations with strong 
algorithmic applications. 

Regarding (a), the classification of temporally flat deterministic computation will draw from cod- 
ing theory, and could also benefit from a classification of the counterexamples to the recently refuted 
|llj LU-LC conjecture. The unifying element among quantum codes with non-Clifford transversal 
gates and LU-LC counterexamples is the interconversion between stabilizer states by non-Clifford 
local unitaries. The existence of such conversions is a remarkable and intriguing property of Hilbert 
space. As we have shown in this paper, this property can be put to work for algorithmic uses. 
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A Proof of Theorems 2 and 3 



Proof of Theorem^ Every observable O z [q] = (S)jefi|%=i ^ife] yields one bit o z of output, through 
the relation (lZ(r,m)\O z [q\\lZ(r,m)) =: (— l)° z [ q l. The binary vector z specifies the support of 
O z [q], and the binary vector q specifies the local observables Oj[qj] occuring in O z [q]. We consider 
z 6 TZ(m,r), q S TZ(t,m). Further, denote X[z] := ($jen\zj=iXj- Then, 



(_l)*[q] := {n(r,m)\O z [q\\K(r,m)) 

= (^(r,m)|(g)e-^(- 1 ) 9iZ «X[z](g)e i ^- 1 )^^|^(r,m)) 



(36) 



= <ft(r, m)|X[q] Q<) e "^X[z] Q£ e l ^X[q] |ft(r, m)>. 
iefi ien 

Denote |7£[q]) := X [q] |7£(r, m)). Then, using X[z] |7?.(r, m)} = \1Z(r,m)), 
(K(r,m)\O z [q\\K(r, m)) 



From its above definition, |72.[q]) 
(Tl(r, m)\O z [q\\K(r, m)) 



y/\n(r,m)\ 
i(f>\z\ 



= {K[q\\ (g) exp(^)|^[q]) 

jen\zj=i 

Ece7J(r,m) Ice q), such that 



|7£(r, m) 



exp 



c£72.(r,m) 



2i0 Cj © 



= i<^|z| e -2i^z-q 

|72.(r, m) 



exp ^ — 2i<^ ZjCj — 2zjCjqj S j . (37) 



c£"R.(r,m) 



Since there are |7£(r, m)\ terms in the c-sum on the rhs of (37), each of weight l/\1Z(r,m)\, the 
expectation value {7Z(r, m)\O z [c\\\lZ(r, m)) can have unit modulus if and only if all terms are equal. 
Since c = £ TZ(r,m), each term in the c-sum on the rhs of (37) must evaluate to 1, i.e, 



exp (-2^£ . gn ^ Cj 



ia(x,c) 



exp 



e «q(z,c)^ -^j^^ a(z,c) = const(q) G 



now 



Since q = £ 7£(i, m), exp ^4i0^ Jgfi ZjCjqjj = exp ^— 2*0 X) 3 - £ q z j c jj = 1 f° r au z > <1> c - We 
introduce the coordinate-wise product ab of two codewords a, b, i.e., [ab]j = [a]j[b]j. With this 
notation, keeping in mind that <j> = tt/2 x (c.f. Eq. (|23|)), the above conditions read 

|cqz| mod 2 X_1 = 0, (38a) 
|cz| mod 2 X = 0. (38b) 



Eq. (38) is the necessary and sufficient condition for the MQC-computation on a Reed-Muller state 
\H(r,m)) being deterministic. Note that Co = (1,1, ..,1) € 1Z(r,m) for all r < m. Thus, if the 
determinism conditions (38) are satisfied, the following promise holds 

|zq| mod 2 X_1 = and |z| mod 2 X = 0, Vc, z € 7Z(r, m), q € TZ(t, m). (39) 



Then, with Eqs. Q, Q36J), Q, each output bit o z [q] is given by = e i2 ^Me - ® 1 X7r l zq l, 

and the computed function is 

|zq| mod 2 X |z| mod 



o«[q] 



2X 



(40) 



The promise Eq. (39) ensures that (O z [q]) is real, i.e., e^^e 2i ^ z *l = ±1 in (37). Also, it guarantees 
that the output o z [q] in Eq. (40) is binary- valued. □ 
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Proof of Theorem HI The determinism constraints of Eq. (38) are a precondion for the input- 



output relation Eq. (|40[). - But for which tuples (r,t,m,x) do they hold? To answer this question, 



we need to further analyze the codewords appearing in Eq. (38). For this purpose, we choose a 
specific basis B(r, m) of 1Z(r, m), namely 



B(r,m) = | z a : [z% = ]Jj k , Va C {l,2,..,m} with \a\ < r,Vj I 



(41) 



By the definition [T] of Reed-Muller codes, the components Cj := [c]j of the codeword c G 1Z{r,m) are 
Cj = P(ji, ■■■,3m)-, where P is a polynomial of degree < r, and (ji, J2, ■■■,3m) is the binary string rep- 
resenting j. Now denote by J z a the set with characteristic vector z a , i.e., J z a = {j G 0| [z Q ]j = 1}. 



By our choice (41 ) for the basis of TZ(r, m), j £ J z « if and only if jk = 1 Vfe € a, and thus 



cz 



-P({ii,--,im}) |{j fc =i,vjfe6a}, if i e J z 



(42) 



0, if j # J z « 

Therefore, \cz a \ = |c | j zQ |, and {c | j zC( | c G 7£(r, m)} is again a Reed-Muller code. Specifically, 

{c | j zCe | c G 7£(r, m)} = 7£ (min(r, m — \a\), m — \a\) , Vz Q G i3(r, m). (43) 

Similarly, |qz a | = |q|j zQ |, |cqz Q | = |cq|j zQ |, and 

{q I J z « I q £ ^-(^ m )} = H (min(t, m — |a|), m — \a\) , Vz° G i3(r, m), (44a) 
{cq | j zQ1 | c G 7£(r, m), q G 7^(f, m)} C 7?. (min(r + t, m — \a\), m — \a\) , Vz a G B(r, m). (44b) 



In ( |44b ) there is no equality because, for c G lZ(r,m), q G lZ(t,m), the codewords cq do not 
necessarily fill the entire space lZ{r + t, m). 

Main case: r, t > 0. We now use the Theorem of Ax |46j . as stated in |47j : 

Theorem 4 (Ax). T/ie r-t/i order generalized Reed-Muller code lZ q (r,m) over the field GF{q) is 
divisible by ql^-Al -1 . Moreover, if p is the prime dividing q, this divisor is the highest power of p 
that divides the code. 



Here, we specialize to p = q = 2, and apply theorem [4] to the codewords cz a . Then, Eq. (43) 
implies that Va C {1,2, .., m}, |a| < r, Vc G 1Z(r, m), q G 1Z(t, m) 



cz 



mod max 



(2l~H-\i) 



0. 



(45) 



I" m— \a\ 1 

Furthermore, for a given a, max (2 1 r I , l) is the largest power of 2 for which this relation 
holds. Now, by comparison between Eq. (38bj) and Eq. (45) we obtain constraints on namely 

X < max ( 



m— \a\ 



1, 0), V|a| < r. The strongest of these constraints arises for \a\ = r, i.e., 



X < max 



m 
r 



2,0 



(46) 



This condition is necessary for Q(r,t,m,x) to be deterministic. 



Case A: r = m. The inequality (46) simplifies to x < 0, which contradicts the assumption x ^ 1 
of the theorem. 

Case B: r < m. The determinism condition (46) simplifies to x < ~ — 1- This, together with 



the assumption x ^ 1; implies m > 2r as a necessary condition for a deterministic computation 
Q(r,m,t,x)- 
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Furthermore, Q(r,m,t,x) can only compute a non-linear function if x > 2; see Eq. (40). Thus, 
2<%< ^ — 1 is the stated necessary condition for deterministic computation of a non-linear 
function. This concludes the proof of the first part of Theorem [2] concerning necessary conditions. 



We now turn to proving the sufficient condition (25 ) for Q(r, m, t, x) deterministically computing 
a non-linear function. This will be done in two steps. First, we provide a sufficient condition for 
Q(r, m, t, x) to compute a non-constant function. Second, we show that for x > 2, non-constant 
implies non-linear. 

Step 1. The output o z of the computation can be a non-constant function only if the phase 
factor e _2 ^ z ' q in Eq. (37) equals -1 at least for one zq G lZ(r,m) and one q G lZ{t,m). Thus we 



require, in addition to the determinism constraints Eq. (|37|), that q ,zo G TZ(r,m) exist for which 



|qo z oi 



mo 



d 2 X 



(47) 



Let us now consider what the theorem of Ax says about the codeword weights appearing in Eqs. 



(38) and (47). We can rule out m = r as before, and only consider the remaining case, r < m. 



Then, by applying the first part of Theorem [4] to Eqs. (44) it follows that Va C {l,2,..,m} with 
\a\ < r, Vc G H(r, m), q G 7£(i, m), Vz a G B(r, m) 



|qz 
|cqz c 



mod2l * I 
r m-N ]_ 1 

mod 2 1 r+t I 



0, 
0. 



(48a) 
(48b) 



In addition, by applying the second part of Theorem [4] to Eq. (44a), there exist z" G £>(r, m), q G 
7£(£, m) for which 



|q z 



mod 2 



(49) 



Now, the conditions (38) for determinism and (47) for the computed function being non-constant 



are satisfied if there exists an |a| < r such that the following conditions hold 



X< 
X< 

X = 



m" 
r 

m — r 
r + 1 
m — \a 
t 



(50a) 
(50b) 

(50c) 



To see this, note that substituting (50a) and x ^ 1 m t° Eq. (45) yields \cz a \ mod 2 X = 0, 



implying the determinism constraint (38b) for all z a G B(r,m). Similarly, substituting (50b) into 



(48b) implies the determinism condition (38a) for all z a G B(r,m). Thus, the necessary and 
sufficient determinism condition (38) is satisfied for all such z, i.e., {TZ(r, m)\O z a[q\\lZ(r, m)) = ±1 
for all z a G B(r,m). Now note that if (1Z(r,m)\O z [q]\lZ(r,m)), (lZ(r, m)\O z >[q] \TZ(r, m)) = ±1 then 
(lZ(r, m)|O Z Z /[q] \TZ(r, m)) = ±1. Therefore, if the condition (38) is obeyed for all z a G B(r,m) 



then it is also obeyed for all z G lZ(r,m). Finally, substituting (50c) into (49) implies the condition 



(47). There are no further constraints on r,m,t,x to satisfy. 



We rewrite the sufficient conditions (50) as linear inequalities. That is, we require there exists 
an I a I < r such that 



(X + l)r < m, 
Xr + (x~ 1)* < rn, 
(x — l)t + \a\ < m < xt + |a|. 



(51a) 
(51b) 
(51c) 
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Recall that the sufficient condition in Theorem [2] includes x > 2. If % > 2, the left inequality in 
is implied by (51b). The only remaining place where \a\ appears is the right inequality of 



(51c 



(51c 



. Thus, the constraints (51 ) can be satisfied if and only if they are satisfied for \a\ = r. Then, 



(51b) and the right inequality in (51c) imply 



t > (x — l)r, for x > 2. 



(52) 



Therefore, (51a) is also dependent, and the sufficient conditions (51 ) for deterministically computing 
a non-constant function simplify to 

(x — 1) (r + t) < m — r < xt, for x > 2. (53) 
This is the condition (25) appearing in Theorem [2j but not yet for computing a non-linear function. 

Step 2: Non-constant implies non-linear for x > 2. We start from the assumption that o z a[q] 
is linear in q, i.e., 

o za [0] ©o zQ [p] eo z c[q] ©o zQ [p©q] = 0, Vp, q G TZ(t, m), Vz a G £>(r, m), (54) 

and demonstrate that this assumption always leads to a contradiction. To this end, we pick param- 
eters r,t,m,x such that the conditions (51) for the output being deterministic and non-constant 
are satisfiable for some set a. Then, for any a satisfying (51) we show that we can always find 
vectors p,q£ lZ{t,m) that violate the linearity condition (54). To begin, we choose a specific basis 
for {q} = lZ(t, m), namely {q 13 } = B(t, m), c.f. (41 ). 

Sub-case A: m — \a\ — t = 1. Recall that the assumption of the main case is t > 1. Then, from 
(50c) and the sub-case assumption, x = l"^ 1 ] = 2- To specify q^ 3 we choose sets (5 with \(3\ = t and 
a n (3 = 0. Then, the codewords z Q q^ depend on a single parameter k G {1, 2, .., m} and are of the 
form 

(55) 



zV(k) = n jk. 

fc£{l,..,m} — K 

That is, [z Q q /3 (K)]^. = 1 if and only if j G {2 m — 1, 2 m — 2 K — 1}. For a fixed, there are t+l choices for k. 
Thus, there are always at least two choices, k\ and K2 ^ Ki- For those, [z a q /3 (Ki) © z a q^(/t2)] • = 1 
if and only if j G {2 m - 2 Kl - 1, 2 m - 2 K2 - 1}. Thus, 



zV(«l) 



zWi) 



z a q^(« 2 ; 



(56) 



Now, set 0i := {l,..,m} — a — ki, 02 ■= {l,..,m} — a — K2- Then, with % = 2, Eqs. ( |40| ) 
and (56), o^^ 1 ] = l^q'" 1 ^ mod 4 © OzQ [0] = 1 © Oz <*[0]. Analogously, o z «[q^] = l © Oza [o] and 
o z a[q^ x © q' 32 ] = 1 © o z q[0]. Therefore, the choices p = q^ 1 , q = q^ 2 yield a contradiction in (54). 
The output o z a[q] is thus non- linear in q = Qi mod 2, and hence in i. 



Sub-case B: m 



\a\ - t > 2. Note that |z a q^| = 2 m -l aU ^l and m 
\z a qP\ mod 2 m ~^- t = 0. 



\a U 0\ > m — \a\ 



t. Thus, 

(57) 



The assumption of the main case, r > 1, and x ^ 2 in Eq. (52) imply £ > 2. Then, with Eq. ( 50c[ ), 

m—\a\—t 
t 



< m — \a\ — i, and thus x < m — |a| — t. Combining this with (57), we find 
|z a q^| mod2 x = 0, Vz Q G B(r, m), G m). 



However, with (50c) in (49), there exists a z a G B(r,m) and a q G lZ(t,m) such that 



|z q | mo 



d 2 x = 2 X-1. 



(58) 
(59) 
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Now, expand all q satisfying (59) as q = X^^ !^- Among those, choose one q with minimal 

> 2. Now choose one (3 for which is = 1. Then, with (40), (58) 



support wrt. i. Because of (58), |i 



and (59), 



°z a [q^] = o z c [0] , o z c [q ] = o z « [0] © 1, o z a [q 13 © q ] = o z a [0] . 



(60) 



The choice p = q , q = qo thus leads to a contradiction in the linearity condition (54). The output 
°z a [q] is therefore a non-linear function in q = Qi mod 2, and hence in the input i. 



is excluded by (|25|) for x > 2. 

n2 m 



Remaining cases: r = or t = 0. Case A: t = 0. There is only one bit of input, hence the 
computed function cannot be non-linear. Correspondingly, t 

Case B: r = 0, t > 0. If c € 11(0, m) then Eqs. 
n G {0,1}. Then we find the sufficient condition (\ — l)t < m < \ > 2 for Q(0,t,m,x) to 
compute a non-linear function. It coincides with condition (25) for r = 0. 



48b, (47) are repalced by |c| 



with 



Finally, we show that for m > 3r + 1, one can always find parameters x ^ 2, t > such that 
the condition (25) can be satisfied. To this end, we set x = 2 and m = 3r + c. For these choices, 



(25 ) becomes r+§ < t < r + c. With r and t being integers, a solution for t exists if c > 1. □ 
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